
$ rpki-client -vvvf rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa
File: 34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa (raw, json)
Hash identifier: wNjrKsyJSSbYJOtYyfby8BfL/OaISn62pk5pO4HtxP4=
Subject key identifier: C0:D0:A7:D3:87:4D:51:44:29:8E:5F:C3:21:AF:DE:68:C4:E5:81:5B
Certificate issuer: /CN=71238E97CC73F492E8BD23DB6B3EA12536850E88
Certificate serial: 45278F63757C3797959AE7D099021193228F112E
Authority key identifier: 71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa
Signing time: Tue 08 Sep 2026 19:10:39 +0000
ROA not before: Tue 08 Sep 2026 19:05:39 +0000
ROA not after: Tue 07 Sep 2027 19:10:39 +0000
asID: 267155
IP address blocks: 45.229.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.crl
rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 19:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:27:8f:63:75:7c:37:97:95:9a:e7:d0:99:02:11:93:22:8f:11:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71238E97CC73F492E8BD23DB6B3EA12536850E88
Validity
Not Before: Sep 8 19:05:39 2026 GMT
Not After : Sep 7 19:10:39 2027 GMT
Subject: CN=C0D0A7D3874D5144298E5FC321AFDE68C4E5815B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:db:7e:77:bb:95:10:34:e8:3c:06:b7:43:
7c:f6:d1:9b:74:ae:68:d6:fe:5b:b7:bd:51:3b:8a:
ba:95:78:1d:05:fc:0f:94:7e:c7:81:1d:da:e6:21:
16:6b:5e:bf:7c:1d:51:3c:61:00:90:88:73:51:ec:
e4:06:7e:46:25:80:9d:ba:3a:46:c5:23:94:3d:42:
d6:0c:f1:85:ec:c7:fc:0f:bb:7f:10:da:5c:5b:9d:
a9:25:5a:a2:2e:2b:16:2b:ab:aa:c8:bf:e7:01:ab:
a3:d4:08:85:28:76:53:a6:00:88:cc:ba:6b:24:7c:
c9:25:94:ad:68:16:e1:94:e4:e8:37:2e:e9:56:c5:
79:3f:7b:71:2a:c5:ea:7d:5b:cb:00:39:12:1b:4b:
22:98:1e:a8:7c:24:13:ee:82:48:8e:a1:b8:fb:ae:
03:84:1d:2a:14:39:61:de:fe:d4:14:1e:f2:40:3a:
90:a3:59:03:9f:16:90:d3:f3:10:78:3b:99:40:7f:
93:e6:59:1f:5e:e9:07:0e:0c:d2:97:da:7a:40:63:
e3:6e:c2:35:61:ba:c7:89:98:2f:c8:fb:64:f5:ce:
b7:e0:91:a2:22:3b:eb:ca:ab:f8:c1:fe:f5:48:1b:
f9:b2:3d:80:92:13:35:f1:1b:8d:74:f1:f7:2e:f0:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D0:A7:D3:87:4D:51:44:29:8E:5F:C3:21:AF:DE:68:C4:E5:81:5B
X509v3 Authority Key Identifier:
keyid:71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.144.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:5a:8a:00:1f:9a:6e:85:38:77:5c:d6:e0:86:8a:3d:96:ad:
23:26:d3:de:8b:6e:51:4f:ae:30:ff:e8:bf:c3:a3:6d:70:cf:
d2:75:64:f6:7f:df:bc:c4:d7:93:2d:41:9b:97:10:d9:2f:97:
a4:19:7a:72:de:77:b1:ea:16:2b:ec:ee:3f:f8:d7:29:02:d1:
22:0d:9a:29:1f:b8:92:17:a5:07:7f:b9:c9:0f:84:c7:06:80:
6a:62:78:b4:1a:77:e9:ad:7e:ed:05:59:58:7f:b1:7c:5f:fc:
82:46:66:e9:f3:36:02:57:4b:73:0e:a5:09:52:ad:84:52:77:
ca:c5:0d:6a:96:78:fd:09:33:13:ae:6e:1a:9c:9a:da:bb:7f:
36:b1:00:bf:07:54:07:6e:f0:26:0e:a4:83:fa:53:a6:64:b9:
04:36:6e:e7:b7:c4:12:3a:d9:da:57:42:c3:20:f8:e0:7a:2c:
16:ed:38:56:e7:21:14:49:4a:00:83:75:e9:3a:26:fb:0a:d2:
5c:34:2b:99:58:f5:f4:e4:6b:ad:28:f4:ef:3f:2c:3b:f4:e8:
55:e8:15:de:81:50:66:a6:9e:53:5b:e8:f4:c1:1a:2c:44:55:
d7:ef:c8:8b:dc:d2:2d:5e:c1:5c:75:a2:c6:59:60:bd:d4:54:
49:8f:5f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 12:59:20 2026 by rpki-client